🛡️ **Fraudulent Job Candidates Obtaining Legitimate Company Credentials Via Remote Hiring — 90-Day Onboarding Blind Spot**
Published Thursday, September 17, 2026 at 11:36 PM PT BLUF: Threat actors are successfully impersonating job candidates to pass remote interviews and obtain authentic company credentials directly from IT departments. 98% of fraudulent hires possess valid credentials by detection time. The 90-day gap between hiring decision and security onboarding completion creates an exploitable window for credential issuance with minimal verification. Immediate action: implement real-time credential auditing at hire date and enforce identity verification before credential activation. ...